Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File:                     rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier:          UQLqc+qhBLch9+HoGj+xechSelB7YRHKc+t4qLcLFMA=
Subject key identifier:   BA:8F:C8:BD:89:BD:1B:33:F5:DD:92:EF:6D:98:C0:06:64:51:88:5B
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer:       /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial:       0194BBCE36F2B27D7C77AEEE792F0486E8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number:          11B5
Signing time:             Fri 31 Jan 2025 10:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:41 +0000
Files and hashes:         1: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (hash: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=)
                          2: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (hash: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=)
                          3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: MuuivgJUTVYiYDZA4DCL2cx1xTe6REVkvNMpA1rF358=)
                          4: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (hash: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:36:f2:b2:7d:7c:77:ae:ee:79:2f:04:86:e8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
        Validity
            Not Before: Jan 31 10:00:41 2025 GMT
            Not After : Feb  1 10:00:41 2025 GMT
        Subject: CN=ba8fc8bd89bd1b33f5dd92ef6d98c0066451885b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:04:90:e8:52:29:43:34:1c:66:b6:f2:48:
                    49:99:d7:13:46:0e:15:b6:ef:9a:c6:f2:65:fe:66:
                    9c:e0:e0:57:df:57:33:19:f3:d9:f1:21:16:36:5f:
                    2f:2a:07:25:1b:70:bc:2a:0d:dc:63:96:89:89:9a:
                    9e:23:9a:27:c9:87:9b:de:55:6b:9c:9d:f2:72:1a:
                    d1:4e:a9:06:af:f7:c4:f8:8c:c2:de:c4:d9:03:e4:
                    2b:07:46:2c:44:38:d4:d0:84:d4:29:10:34:9f:7e:
                    56:66:15:a4:0d:79:e8:a7:5d:7a:0b:b3:1e:3a:61:
                    95:ef:06:79:30:51:c6:ab:9b:46:86:ec:29:ea:b4:
                    62:c4:71:7f:1f:87:c3:2d:fc:31:3d:46:e9:d8:04:
                    99:31:20:83:b3:e8:41:71:31:9e:96:c2:cd:4d:80:
                    3b:36:d2:36:23:11:94:37:a8:4e:dc:a7:13:28:98:
                    f1:28:be:f5:f0:fb:dd:c1:33:91:f7:21:b3:bd:e2:
                    94:ab:94:ca:97:ef:1c:ff:20:39:f6:7f:e7:28:1b:
                    5a:c4:32:5a:02:96:9f:41:53:c8:d4:c6:6a:23:41:
                    48:8d:81:78:d8:c9:d3:ae:07:ea:83:f4:4c:d3:bb:
                    55:11:b5:f2:54:d3:4e:c2:da:58:cf:e8:5c:a8:69:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:C8:BD:89:BD:1B:33:F5:DD:92:EF:6D:98:C0:06:64:51:88:5B
            X509v3 Authority Key Identifier:
                keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:eb:f6:bc:d7:6d:3d:9a:8d:22:b1:92:5d:fe:e9:48:7f:0c:
         cc:30:bb:fa:cd:61:73:06:03:d2:ad:0f:65:fc:f7:3b:4c:4c:
         b1:eb:55:f7:22:9a:18:b5:8f:41:72:a4:ea:bc:ff:52:7c:f5:
         e1:28:47:31:89:61:37:2c:26:bd:87:44:5e:85:a2:ae:49:cc:
         d0:e6:b9:de:41:45:c9:29:04:45:19:d8:1f:bf:45:ac:5e:36:
         34:f2:09:97:96:9e:f5:a5:fc:1d:ef:ba:bf:db:f4:3f:88:7a:
         b5:91:57:c3:7a:99:fe:f7:3a:01:ea:29:6f:cf:95:58:d0:6d:
         5e:92:c4:24:df:0c:10:97:5c:b5:c9:b3:b3:95:76:b9:8b:11:
         1b:a9:f5:ad:65:fe:88:65:21:14:71:2a:34:45:41:ab:ab:b7:
         37:5c:af:d2:bc:87:1a:81:0d:f2:43:56:06:d5:73:51:3b:a2:
         51:51:c1:39:5d:df:de:fd:3c:13:2a:85:1e:33:22:eb:d3:36:
         52:eb:f1:04:3c:09:4f:54:45:b3:39:8f:ec:6f:3c:4c:d5:25:
         a7:50:9a:29:eb:52:6b:6f:ce:9d:12:d3:be:fd:d5:3f:01:50:
         59:a6:3a:3f:e4:0d:2d:cc:55:16:d5:0f:29:77:9e:3f:bc:e2:
         4b:23:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----